Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3232203d3e20323639333539.roa
File:                     34352e3138342e36382e302f32322d3232203d3e20323639333539.roa (raw, json)
Hash identifier:          DNBI2fgIg5DpSSf//avc4Io5KTB9cmAn19M1GDUxr5I=
Subject key identifier:   5C:B5:EB:92:59:E9:46:66:8A:69:2D:56:9B:5D:C0:52:D2:40:D3:C5
Certificate issuer:       /CN=BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63
Certificate serial:       5454FB267537FA408945BE98AE131DE06B1BAC68
Authority key identifier: BC:F9:27:3F:C3:E8:3E:CF:7C:4B:19:36:A3:28:D3:DF:02:51:AC:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3232203d3e20323639333539.roa
Signing time:             Thu 03 Sep 2026 18:50:35 +0000
ROA not before:           Thu 03 Sep 2026 18:45:35 +0000
ROA not after:            Thu 02 Sep 2027 18:50:35 +0000
asID:                     269359
IP address blocks:        45.184.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.crl
                          rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:54:fb:26:75:37:fa:40:89:45:be:98:ae:13:1d:e0:6b:1b:ac:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63
        Validity
            Not Before: Sep  3 18:45:35 2026 GMT
            Not After : Sep  2 18:50:35 2027 GMT
        Subject: CN=5CB5EB9259E946668A692D569B5DC052D240D3C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c7:74:a7:5e:c2:bd:88:a2:fc:d6:00:54:28:
                    ba:ae:73:bb:22:6a:95:a1:2a:a7:ca:c0:7c:0a:13:
                    77:28:b0:6a:f0:0d:4a:43:46:93:88:a2:a8:b7:88:
                    03:e9:8d:01:50:1f:7d:88:13:ae:5b:63:dc:aa:ea:
                    71:aa:b1:ae:0b:78:ec:94:a5:df:11:34:8a:15:6b:
                    20:5c:47:ea:21:a8:9b:aa:22:88:e0:f9:93:83:37:
                    0c:43:bd:ba:4c:e4:93:1c:22:82:06:ba:63:06:7d:
                    79:eb:82:88:ec:9b:c6:cf:1d:a1:1d:34:32:a9:ca:
                    db:9f:74:74:61:74:f1:27:1c:03:90:8f:76:35:f8:
                    2c:14:9e:cf:ab:ca:ea:98:58:53:72:b5:ef:da:fd:
                    02:2c:ec:12:87:ba:c9:8e:4a:96:31:4b:3e:c1:8b:
                    40:32:d9:0e:db:dd:a6:d8:8d:67:29:b7:fa:cb:bd:
                    6f:20:44:2b:be:7b:20:5f:4e:47:79:f9:1f:02:3e:
                    c3:e7:87:0e:66:8d:ed:b8:67:3d:e1:80:2a:36:a9:
                    bc:3f:53:c8:64:cb:ee:cc:e9:20:8b:64:e1:52:44:
                    3d:5d:c1:14:9a:f9:68:59:31:87:50:aa:7f:2a:c0:
                    36:2f:65:d0:5b:9c:91:30:41:cb:8c:a6:c1:03:d9:
                    cd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B5:EB:92:59:E9:46:66:8A:69:2D:56:9B:5D:C0:52:D2:40:D3:C5
            X509v3 Authority Key Identifier:
                keyid:BC:F9:27:3F:C3:E8:3E:CF:7C:4B:19:36:A3:28:D3:DF:02:51:AC:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3232203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:16:01:10:f9:d5:08:2b:b9:7b:d4:ac:a2:28:3b:40:c2:2c:
         c1:f0:00:c6:bc:14:fb:ca:0b:c2:93:44:7a:f4:59:dc:4f:4c:
         c6:05:2f:4a:5d:43:20:af:34:e2:29:17:a0:16:fb:c3:76:27:
         c7:8e:61:80:04:94:ee:03:a6:0e:e3:70:d2:c1:c4:3d:7a:15:
         a5:79:2d:0d:0c:91:cc:7a:fd:67:d5:8c:e7:a0:b3:09:d0:a6:
         36:f4:63:ed:db:a0:96:18:d5:9b:36:e5:83:f4:59:84:2e:3b:
         66:bf:13:aa:22:dc:c3:02:0e:39:b0:47:71:cb:87:23:69:4b:
         7a:a5:7e:67:d2:62:c2:8a:25:25:86:25:7c:01:e5:1e:66:a4:
         7e:42:ce:3b:d0:db:50:ba:fd:4c:a8:4a:3f:74:77:92:22:eb:
         e0:ff:5a:8a:fb:36:4f:f2:a1:c2:fb:0d:e1:cd:05:7e:4e:6d:
         54:87:90:56:1d:bd:eb:97:2b:bf:07:aa:7e:00:ba:bf:2e:66:
         f5:e9:f6:ec:4e:7d:4d:02:81:c9:14:08:3d:bb:41:0d:50:f0:
         6d:27:41:c3:08:0d:2d:b3:91:43:85:10:c4:7a:59:17:de:11:
         5a:fe:72:2e:cd:26:74:b7:f8:1f:36:ee:82:7d:6b:a1:0b:e8:
         73:5c:e7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:00:57 2026 by rpki-client